最新的Juniper Security, Specialist (JNCIS-SEC) - JN0-333免費考試真題
問題1
Click the Exhibit button.
Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination 192.168.150.3 using HTTP?
Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination 192.168.150.3 using HTTP?
正確答案: C
問題2
Which action will restrict SSH access to an SRX Series device from a specific IP address which is connected to a security zone named trust?
正確答案: B
問題3
Click the Exhibit button.
You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit - http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)
You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit - http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)
正確答案: A,D
問題4
Which host-inbound-traffic security zone parameter would allow access to the REST API configured to listen on custom TCP port 5080?
正確答案: A
問題5
You want to ensure that any certificates used in your IPsec implementation do not expire while in use by your SRX Series devices.
In this scenario, what must be enabled on your devices?
In this scenario, what must be enabled on your devices?
正確答案: D
問題6
You are asked to support source NAT for an application that requires that its original source port not be changed.
Which configuration would satisfy the requirement?
Which configuration would satisfy the requirement?
正確答案: A
問題7
What are the maximum number of supported interfaces on a vSRX hosted in a VMware environment?
正確答案: C
問題8
Which statement is true about high availability (HA) chassis clusters for the SRX Series device?
正確答案: B
